CVE-2026-76243
Received Received - Intake

Stigmem Authentication Bypass in Non-Loopback Deployments

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: VulnCheck

Description
stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, and federation operations with anonymous identity when nodes are exposed outside local development environments.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-76243
EUVD
EUVD-2026-62407

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
stigmem stigmem to 0.9.0a2 (exc)
eidetic_labs stigmem to 0.9.0a2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-285 The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-76243 is a critical authentication bypass vulnerability in stigmem versions before 0.9.0a2. When authentication is disabled, nodes exposed outside local development environments allow unauthenticated attackers to perform read, write, and federation operations with anonymous access.

Detection Guidance

Check stigmem version with command: stigmem --version. If version is before 0.9.0a2, the system is vulnerable. Verify if authentication is disabled and node is bound to non-loopback URL by inspecting configuration files or startup logs.

Impact Analysis

This vulnerability allows unauthorized users to access, modify, or federate data without authentication. It can lead to data breaches, unauthorized changes, or system compromise, especially if nodes are exposed to untrusted networks.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access control, such as GDPR's data security principles or HIPAA's access controls. Unauthorized access could result in regulatory penalties or data exposure.

Mitigation Strategies

Upgrade stigmem to version 0.9.0a2 or later immediately. Ensure authentication is enabled for non-local deployments. Avoid exposing nodes with disabled authentication to untrusted networks. Review and restrict node bindings to loopback-only environments if authentication must remain disabled.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76243. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart